The RegEx doesn't lower security and works flawlessly (for me also). Reason: it extends the allowed characters scope beyond ASCII (neither HTML nor JS use characters higher than ASCII for commands). If you don't understand that, live on with the fear.
The worst thing about censorship is ███████████
"The problem is probably not my English but you do not want to understand correctly. ... We will not come anybody anyway, nevertheless, it's best to shit this." Affin, 2018-11-20 ↑
"But this shit is not here for you. You can follow with your. Maybe the question, instead, was for you, who know, so you shoved us how you are." axe70, 2020-10-10 ↑